146600 matches found
hijackthis
Download Latest build v3.x - Release Stable build v2 outdated - not updated anymore this is beta-version - major changes are in progress; although it is definitely safe to use HiJackThis+ HiJackThis+ Plus previously called: HiJackThis Fork v3 is a fork and a continuation of the original Trend Mic...
Microsoft Open Management Infrastructure - Remote Code Execution
Microsoft Open Management Infrastructure is susceptible to remote code execution OMIGOD. id: CVE-2021-38647 info: name: Microsoft Open Management Infrastructure - Remote Code Execution author: daffainfo,xstp severity: critical description: Microsoft Open Management Infrastructure is susceptible t...
Vidar-Stealer-Reverse-Engineering
Analisi di Reverse Engineering di Vidar Stealer 2.0 Panoramica Questa analisi copre un approfondito reverse engineering di Vidar Stealer 2.0 , un sofisticato information stealer che utilizza tecniche di evasione avanzate per rimanere non rilevato. I risultati principali includono: Manipolazione...
responsible-ai-toolbox
Responsible AI Toolbox L'IA responsabile è un approccio per valutare, sviluppare e distribuire sistemi di IA in modo sicuro, affidabile ed etico, e per prendere decisioni e azioni responsabili. Responsible AI Toolbox è una suite di strumenti che offre una raccolta di interfacce utente e librerie...
CVE-2026-26114-Patch
CVE-2026-26114-Patch corrigindo o N-day do CVE-2026-26114 antes da Microsoft. onde a Microsoft não conseguiu corrigir 100% em muitos meses. mas a FAC security conseguiu...
follina.py
'Follina' MS-MSDT n-day Microsoft Office RCE Schneller POC zur Reproduktion der 'Follina'-Office-RCE-Schwachstelle für lokale Testzwecke. Das Ausführen des Skripts erzeugt eine Payload-Datei clickme.docx oder clickme.rtf in Ihrem aktuellen Arbeitsverzeichnis und startet einen Webserver mit der...
AzureADAssessment
Microsoft Azure AD Assessment Guida per il valutatore Se sei un dipendente Microsoft o un partner che esegue la valutazione per un cliente, consulta il Wiki per la Guida alla valutazione. Installazione dalla PowerShell Gallery Se riscontri errori, consulta la sezione FAQ alla fine di questo...
Detours
Pacchetto Microsoft Research Detours Detours è un pacchetto software per il monitoraggio e l'instrumentazione delle chiamate API su Windows. Detours è stato utilizzato da molti ISV ed è anche usato dai team di prodotto Microsoft. Detours è ora disponibile con una licenza open source standard MIT...
MSRC-Security-Research
Introduzione Questo progetto ospita ricerche sulla sicurezza del Microsoft Security Response Center MSRC. Contribuire Al momento, questo progetto non accetta contributi esterni, ma speriamo di farlo in futuro. La maggior parte dei contributi richiede di accettare un Contributor License Agreement...
CVE-2026-62316
Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, ufo/client/mcp/httpservers/linuxmcpserver.py binds a FastMCP streamable HTTP server to localhost:8010 but does not validate the Host, Origin, or Sec-Fetch-Site headers. An...
CVE-2026-62316 Microsoft UFO: DNS Rebinding → Unauthenticated File Read / Command Execution
Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, ufo/client/mcp/httpservers/linuxmcpserver.py binds a FastMCP streamable HTTP server to localhost:8010 but does not validate the Host, Origin, or Sec-Fetch-Site headers. An...
CVE-2026-62316 Microsoft UFO: DNS Rebinding → Unauthenticated File Read / Command Execution
Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, ufo/client/mcp/httpservers/linuxmcpserver.py binds a FastMCP streamable HTTP server to localhost:8010 but does not validate the Host, Origin, or Sec-Fetch-Site headers. An...
CVE-2026-62316
Microsoft UFO (open-source intelligent automation framework) is vulnerable to a DNS rebinding attack in versions prior to 3.0.8 . The component ufo/client/mcp/http_servers/linux_mcp_server.py binds a FastMCP streamable HTTP server to localhost:8010 without validating Host , Origin , or Sec-Fetch-...
EUVD-2026-64136
Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.8, ufo/client/mcp/httpservers/linuxmcpserver.py binds a FastMCP streamable HTTP server to localhost:8010 but does not validate the Host, Origin, or Sec-Fetch-Site headers. An...
Microsoft Exchange Server SSRF Vulnerability
This vulnerability is part of an attack chain that could allow remote code execution on Microsoft Exchange Server. The initial attack requires the ability to make an untrusted connection to Exchange server port 443. Other portions of the chain can be triggered if an attacker already has access or...
CVE-2026-69502 Azure SQL Database Elevation of Privilege Vulnerability
...
CVE-2026-32637 vulnerabilities
Vulnerabilities for packages: velero-plugin-for-aws, velero-plugin-for-microsoft-azure...
GHSA-J2G6-362Q-6QC6 vulnerabilities
Vulnerabilities for packages: velero-plugin-for-aws, velero-plugin-for-microsoft-azure...
Chromium: CVE-2026-76047 Type confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...